CVE-2026-115788
IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands Log Forging
CVE-2026-115788 is a high vulnerability (CVSS 8.1) in Ibm App Connect Enterprise Certified Containers Operands, published November 13, 2026. No source lists public exploit code. No source names a fixed version.
- Severity
- 8.1 HighCVSS 3.1, CVE List
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands is vulnerable to Log Forging on a request to create a resource.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
What each source reports
CVE List Score used
IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands Log Forging
IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands is vulnerable to Log Forging on a request to create a resource.
- Record
CVE-2026-115788- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-117
- Updated
- 2026-11-13
EUVDEUVD-2026-125815
IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands is vulnerable to Log Forging on a request to create a resource.
- Record
EUVD-2026-125815- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-14
GitHub AdvisoriesGHSA-v66h-4j9c-v32m
IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands is...
IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands is vulnerable to Log Forging on a request to create a resource.
- Record
GHSA-v66h-4j9c-v32m- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-117
- Updated
- 2026-11-14
NVD
IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands is vulnerable to Log Forging on a request to create a resource.
- Record
CVE-2026-115788- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-117
- Updated
- 2026-11-13
History
| Recorded | Changed | Sources |
|---|---|---|
| published | EUVD | |
| aliases, references | GitHub Advisories | |
| aliases, published | EUVD, NVD | |
| first indexed | CVE List |
Dates are when Every CVE recorded each change. Upstream dates may differ.